Privacy explained without the fog.

This Policy applies to the Nydoren website, dashboard, client, automation service, and official support interactions. It does not govern Hero Zero, social-login providers, payment services, Discord, or other third-party products, which operate under their own privacy terms.

Nydoren is an independent service and is not affiliated with, endorsed by, or operated by Hero Zero or its publisher.

• create and administer your Nydoren account;
• provide the features, online slots, client access, and automation settings you request;
• authenticate users, prevent abuse, investigate incidents, and protect accounts;
• confirm purchases, manage access, referrals, cancellations, and refund requests;
• operate, diagnose, maintain, and improve the Service;
• answer questions and send essential service, account, and security messages; and
• meet legal obligations and establish, exercise, or defend legal claims.

Where data-protection law requires a legal basis, the principal bases and purposes are:

Contract and requested pre-contract steps

Account and contact data, selected plans, connected account configuration, requested automation state, and support details are used to create your account, supply requested features, administer access, and respond to service requests.

Legitimate interests

Security events, technical logs, and limited account or transaction context may be used to prevent fraud and abuse, maintain availability, diagnose faults, improve Nydoren, and establish or defend legal claims. We consider the effect on users and do not rely on this basis where their overriding rights require a different result.

Legal obligations

Account, transaction, or communication records may be processed where necessary to meet applicable accounting, consumer-protection, regulatory, or lawful-request obligations.

Consent

Consent is used for optional technologies, communications, connected services, or other processing where the law requires it. Consent may be withdrawn for future processing without affecting earlier lawful processing.

The exact basis depends on the information, purpose, and law that applies to the interaction.

We may share only the information reasonably needed with service providers that support hosting, infrastructure, email delivery, security, customer support, enabled sign-in connections, or payment processing. The provider involved will depend on the feature you choose and the service configuration available at that time.

Information may also be disclosed when required by law, to respond to valid legal process, to protect users or the Service, or as part of a genuine business reorganisation subject to appropriate confidentiality and data-protection safeguards.

We do not publish connected game-account credentials or activity as part of the public Nydoren experience.

Nydoren may use cookies or similar storage that are necessary for sign-in, session continuity, security, form protection, and requested features. The site may also store interface preferences, such as your selected colour theme, in your browser.

If optional analytics or other non-essential technologies are introduced, they will be described and consent choices will be provided where required by law.

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including providing active access, maintaining security and transaction records, resolving disputes, enforcing agreements, and meeting legal obligations.

Account and configuration data

Kept while the account or requested feature is active, then deleted or anonymised when it is no longer needed, subject to security, dispute, and legal-record requirements.

Authentication and security records

Kept for a period proportionate to session management, abuse detection, incident investigation, and protection against repeated compromise. Tokens and sessions are expired or revoked according to their security function.

Purchase and referral records

Kept for the period required to administer access, handle payment disputes and refunds, maintain an audit trail, and comply with applicable accounting, tax, and consumer law.

Support and feedback

Kept until the request is resolved and for any further period reasonably needed for follow-up, safety, dispute handling, or a legal obligation.

Backups

Copies may remain until they leave the normal backup rotation. Restored information remains subject to the same deletion and access rules.

Information may be retained longer where required by law or reasonably necessary for an active legal claim. You may contact [email protected] to ask about the criteria that apply to a particular category of your data.

We use technical and organisational safeguards intended to protect personal data, including access controls, password hashing, encrypted sensitive fields where appropriate, session and token controls, and service monitoring.

No online service can guarantee absolute security. You can help by using a unique password, enabling two-factor authentication, protecting recovery codes, and reporting suspicious activity promptly.

If a provider processes personal data outside the jurisdiction where it was collected and the transfer is restricted by applicable law, we will first identify a lawful transfer basis and any safeguards required for that transfer. You may contact [email protected] to ask which transfer safeguards apply to your personal data.

Depending on where you live and the circumstances, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal data, and to withdraw consent. You may also have the right to complain to the data-protection authority responsible in your jurisdiction.

Some requests may be limited where information must be retained for security, transaction, legal, or overriding legitimate reasons. We may need to verify your identity before acting on a request.

Nydoren is not directed to children who cannot lawfully consent to the processing of their personal data or enter into the Service under the law where they live. Where parental or guardian permission is required, the Service may be used only with that permission.

To ask a privacy question or exercise an available privacy right, email [email protected]. Please do not include a password, recovery code, access token, or full payment-card number.

We may update this Policy as Nydoren, its providers, or legal requirements change. The effective date above identifies the current version, and additional notice will be provided when required by law.